CVE-2012-1438

medium · 4.3

The Microsoft Office file parser in Comodo Antivirus 7425 and Sophos Anti-Virus 4.61.0 allows remote attackers to bypass malware detection via an Office file with a ustar character sequence at a certain location. NOTE: this may later be SPLIT into multiple CVEs if additional information is published showing that the error occurred independently in different Office parser implementations.

4.3

CVSS

14.0%

EPSS (exploit prob.)

96th

EPSS percentile

2012-03-21

Published

AV:N/AC:M/Au:N/C:N/I:P/A:N

Weaknesses

CWE-264

Affected products

Vendor	Product	Affected versions
comodo	comodo_antivirus	7425
sophos	sophos_anti-virus	4.61.0

Check a specific version with /api/v1/cve/match.

References

http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005
http://www.ieee-security.org/TC/SP2012/program.html
http://www.securityfocus.com/archive/1/522005

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2012-1438